Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-6163

No fix known EPSS <1%

The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget template (in the templates/search/PropertySuggestionsWidget.mustache+dom file).

Published 2020-01-08 · CVE record · OSV

Products: mediawiki